Privacy

What Same Canoe keeps

Your account: a random account number made the first time you open Same Canoe. If you choose to keep your grove safe, also your email address.

Each act you log: what you did, how much (for planting, whether it was a tree or something smaller), when, and your phone’s time zone, which places your light at a city on the map. Same Canoe never uses GPS or your exact location.

What you add, if you choose to: the words and photo with an act, the group it was with, the event you logged at, what you refused, your name and colour, reactions, replies, who you follow or block, reports, breezes, groups and challenges you join, events you organise, and photos of trees you planted.

While a quiet time runs on Be still: when it will end, and your phone’s time zone. It’s kept only until your quiet time is over, so others can see how many people are being still right now.

If you make a group’s impact report to print: the group’s name, how many members it has, the days it’s for, its totals and how sure we are of its acts, and the report’s check code and when it was made, so anyone holding the printed sheet can check it against our record. It never says who did what, and it’s kept when you leave the group or delete your account, so the sheet’s code keeps working.

Notes like “somewhere else” or “something else” are seen only by you.

If you ask to join a group you found by its name, we keep your request: who you are, which group, when, and the note you add to it if you add one. If one of its admins declines it, or removes you from the group, we keep when, for 30 days, so you can’t ask that group again before then.

If you report a group: which group, why and when.

Each day you open Same Canoe, that day’s date, so we can count how many people use it. Nothing about what you look at or do in it.

If Same Canoe trusts you as an organiser (a school, church, village or group it knows), it keeps that, so logs at your events count as confirmed, with the name it checked you under, when, and a short note of who you are and how it checked (for example, who it spoke to). Only Same Canoe’s owner sees the note. Documents you send to show who you are are checked and then deleted, not kept.

What stays on your phone

Your grove’s name, the visitors you’ve met, the facts you’ve read about them and the day you last invited one back, which replies to your posts you’ve read, your timers, your reminder settings and your choice of colours stay on your phone (or in your browser, if you use Same Canoe in one) and aren’t sent to us.

When you choose a photo, the app reads the date it was taken from the photo itself, on your phone or computer, to check it’s from today or yesterday. That date isn’t sent, and a photo is sent without the details a camera writes into it, like where it was taken.

If Android closes the app while you’re away from it, where you were is kept on your phone for half an hour so it can open there again: the page, an act you’d started logging and its photo, a quiet time or a timer.

A copy of your own acts, as the app last had them from Same Canoe, so your grove shows straight away when the app opens. It’s deleted with your account.

Who can see what

Everyone using Same Canoe sees each act as a light on the world map at your time-zone city, without your name, and in the week’s totals on the World screen.

Anyone visiting Same Canoe’s website, samecanoe.app, sees the same lights on its map, how many acts there have been in the last 24 hours and by how many people, and how many trees and plants have been planted, never who.

Acts also appear in the community feed, with your name if you’ve chosen one. Anyone can see the reactions on them and how many followers you have. Only you and the person you follow know that you follow them.

The words and photo you add to an act, and the replies under it, are seen only by people in a group with you and by friends: people you follow who follow you back. A reply you write on someone else’s post is seen by their groups and friends.

Photos are kept at a hard-to-guess web address. Anyone that address is passed on to could open the photo.

Same Canoe’s owner can see words and photos when checking reports, big logs and logs past a day’s allowance.

Same Canoe’s owner can see the email a trusted organiser’s grove is saved with, or one asking to be trusted, to check it’s them and to check again each year. He also sees totals of how Same Canoe is used, like how many people acted or opened it each day, never who did what.

While the Resonance is with you, and on Be still, anyone using Same Canoe sees how many people are being still right now and in how many places, never who.

Members of a group see the group’s grove, who belongs to it and what its members have given together, and any member can share a picture of its grove with those totals and its tree rings, which never say who did what. People with an event’s code see its details, and whether its organiser is a trusted one.

A trusted organiser has a tick by their name on their page, posts and replies, and their events say who runs them. If they change their name, the tick goes until Same Canoe has checked the new one.

A group’s admins can let people find it by its name, once it has at least 3 members and is a week old. Then anyone using Same Canoe can find it, and sees its name, how many are in it and its first admin’s name, never its code or who else is in it. When you ask to join a group, its admins see your name, your note if you add one, when you asked and how many acts you’ve logged, and can open your page. A log you made with a group shows the group’s name with your post, to everyone who sees the post. Only Same Canoe’s owner sees who reported a group.

A group’s members see the impact reports made for it. Anyone with a report’s check code sees its record: the group’s name, its days and its totals.

Who helps run Same Canoe

Supabase stores the app’s data and photos.

Cloudflare hosts Same Canoe’s website, and the app when you use it in a browser. Like any web host, it sees the internet address of whoever visits.

Sign-in codes are emailed through Gmail, so Google sees the email address a code goes to.

The weather in your grove and around the canoe on the World screen comes from the nearest airport’s weather reports, published by the US Aviation Weather Center. Our server asks for them for your time-zone city, never your location, and shares the answer with everyone in that city for 15 minutes. If our server can’t be reached, your phone asks the Aviation Weather Center itself.

Open-Meteo provides the forecast, and the weather where there’s no airport nearby. The app sends it your time-zone city, and like any website it sees your phone’s internet address.

Same Canoe uses no advertising or tracking services.

Deleting your account

On the You screen, choose “Delete my account”. This removes your acts, photos, posts, replies, name, email and the days you opened Same Canoe, and takes you out of every group you’re in. A group you started carries on with its other members (if you were its only admin, whoever has been in it longest becomes its admin), and a group with nobody left in it goes. It can’t be undone.

Totals the world has already seen, like how many acts happened today, stay as numbers but no longer link to you. So do a group’s printed reports: their totals stay with their check codes.

If you can’t open the app, write to hello@samecanoe.app and we’ll delete it for you.

Children

Same Canoe is for people aged 13 and over. If you think a child under 13 is using it, tell us and we’ll delete their account.

Questions and changes

To see, correct or delete what Same Canoe keeps about you, write to hello@samecanoe.app.

If this page changes in a way that matters, we’ll tell you in the app.